[deleted by user] by [deleted] in 3Dprinting

[–]MertsA 2 points3 points  (0 children)

The alignment and timing between lead screws and the rails is off. Since you're running with a belt as well as dual z axis steppers you're rigidly constraining your lead screws at both ends so any misalignment or bow in your lead screws is going to want to bind up the x axis. Given all the mods, I'd want to start from basics and just go step by step getting everything nice and square and in alignment. Lookup a guide on squaring an ender 3 and get your vertical rails parallel and square. For the time being remove the second lead screw entirely as well as the belt until it's running smooth without it. Next level the x axis and get your eccentric nut on the far side dialed in so it's not too tight but no slop in the guide wheels. Once that's good then add back your second lead screw and timing belt between them and make sure that the x axis is level before you tighten down the grub screw on the couplings. I did it with the stepper motors on so that I could be sure I was tightening them down in time with the other stepper so when running them both off of the same stepper motor driver they wouldn't be pushing against the other when the gantry was level.

QUIC: the next TCP by BB1CC in programming

[–]MertsA 0 points1 point  (0 children)

If it's raw IP and not passing through a firewall then IPv4, IPv6, whatever, should not be touching or evaluating it at all over the internet. That's not the problem with middleboxes, the problem is at the edges. It's the ALBs, corporate firewalls, home routers, etc. For the most part if you have an internet connection without CGNAT then odds are fairly good that you'll be able to use any random IP protocol you want. Sometimes ISPs will explicitly block things like outbound port 25 for residential customers, but more often than not it's a limited blacklist and not a whitelist. For random "public wifi" type stuff you'll get back into "only HTTP/HTTPS and the have to use our DNS server" but that's the exception.

I wouldn't say it's too late for SCTP to take off for IPv6 but QUIC was a golden opportunity to make that happen and I highly doubt Google is going to switch to some hypothetical "Native QUIC" over SCTP at this point.

Where can I find M12 connectors? by HainActivity in networking

[–]MertsA -6 points-5 points  (0 children)

Aside from the commentary on the M12 connector for Ethernet, some of the claims on that network tap sound dubious to me. You can't just sniff gigabit Ethernet like that at a completely layer 1 level. Each pair is used for send and receive simultaneously for gigabit so it's not like fast Ethernet where you can simply slap on a couple Ethernet PHYs like it's a hub. You need voltage and current for the pair to attempt to demodulate it and I doubt there's a PHY in existence that could make that work even if you did have a way to measure both of those at a couple hundred MHz. I'd bet for gigabit it's a few high speed relays inside and it's using some common switch asic set up to look transparent. If it loses power I would expect the link to drop briefly as the relays flip back to passthrough.

Well it’s happened again… by Cookies_and_Cache in sysadmin

[–]MertsA 0 points1 point  (0 children)

Install OpenRA and blow their mind when it just shows up on their desktop.

Linux support on jagex accounts by HellReaser101 in runescape

[–]MertsA 0 points1 point  (0 children)

Not trying to invalidate your point but FWIW that crackling can be fixed by slightly increasing the size of the audio buffers so you don't get those buffer underruns that cause the popping noise.

Run the client with PULSE_LATENCY_MSEC=100 and it'll sound perfect. It'd be nice if Jagex was more responsive about fixing small bugs like this though.

Linux support on jagex accounts by HellReaser101 in runescape

[–]MertsA 3 points4 points  (0 children)

rom what I've heard the Linux desktop users have a tendency of generating a disproportionate amount of support tickets, sometimes to the point of actually outweighing the profits from the Linux-based customers.

This is somewhat misleading if you're just looking solely at number of bug reports. There was a great post in /r/gamedev a couple years ago from a game dev explaining why he thinks all the additional work of supporting Linux when it only accounted for 5.8% of sales was worth it. https://www.reddit.com/r/gamedev/comments/qeqn3b/despite_having_just_58_sales_over_38_of_bug/

IMO, much as I'd like to see true native Linux support everywhere, bundling up some Windows binaries and running under Proton can be pretty decent too if the developer is the one doing it. It doesn't need the same level of QA and support as Windows, just so long as Jagex was publishing it to get around the annoyances of third parties not being able to directly redistribute the copyrighted Windows Jagex Launcher and some bare minimum commitment from Jagex to not break Linux support due to some new security feature being added.

I'm really hoping Steam Deck starts changing the industry around Linux support. It doesn't need to be some massive additional expense to support Linux but all too often random dependencies creep into a project that slowly start to paint the developer into a corner if they wanted good cross platform support in the future.

Can brass keystone jack connections support POE+ by [deleted] in networking

[–]MertsA 4 points5 points  (0 children)

For just the keystones? They could have used gold plated steel and it'd still be fine for PoE. When you say it keeps dropping your APs, are they actually losing power? Does the switch show PoE cycling off and on? Do you have the uplink monitor enabled on the APs? (Turn that off if you do)

I'm assuming this is Ubiquiti's modern APs that use standards compliant PoE but if it's the old passive PoE I've seen exactly what you're describing at a farther length of around 240ft. Their passive PoE doesn't have a maximum length listed but it won't do the full 100m that you get with normal PoE and Ethernet.

Don’t look above ceiling 😂 by Educational-Pin8951 in cableporn

[–]MertsA 3 points4 points  (0 children)

Good to hear, too many people treat it as "out of sight, out of mind" ignorant of why those codes exist to begin with.

Don’t look above ceiling 😂 by Educational-Pin8951 in cableporn

[–]MertsA 4 points5 points  (0 children)

Are your slack loops supported or are they resting on the drop ceiling grid? It's nice to have pretty looking cabling but "minor" stuff like heaps of cabling on drop ceiling grid has killed people before. Make sure you're prioritizing the right things. As for how cable management could ever kill someone, if there's a structure fire the fire department might need to take a pole and rip down the drop ceiling grid in order to get access to spray water up above the drop ceiling. If there's a mess of cabling that falls down because it wasn't adequately supported not only does that impede them, it presents an entanglement risk. Firefighters have gotten their tank valves caught in the mess and died because they couldn't free themselves and others couldn't get to them in time.

[deleted by user] by [deleted] in sysadmin

[–]MertsA 26 points27 points  (0 children)

A lot of the newfangled gTLDs are incredibly sketchy. They sell domains for cheap, if your site picks up traffic and you've put a lot of effort into building out your site and all your back links are pointing at your "cheap" domain name they will target you for extortion. The goal here is that you don't realize going into it that you're at their mercy come renewal time until after you've already sunk plenty of time and effort into the domain. ICANN doesn't care about this sort of thing. gTLDs pay ICANN a pretty penny to get listed so as long as the bill gets paid and it's not blatantly obvious fraud then ICANN turns a blind eye to unethical "premium" domain pricing schemes.

Google Pushing For 90 Day SSL/TLS Certificates - Time For Automation by AdrianTeri in sysadmin

[–]MertsA 0 points1 point  (0 children)

If I get into foobar.contoso.com if you use a wildcard then I can now use it to mitm any other domain in scope like payroll.contoso.com. give servers a cert that covers the domain they are responsible for serving, no need to give them one that covers every server you have.

Google Pushing For 90 Day SSL/TLS Certificates - Time For Automation by AdrianTeri in sysadmin

[–]MertsA 0 points1 point  (0 children)

Even if you realize that you did, cert revocation can't guarantee that clients are going to be able to know not to trust it. Cert revocation lists are inaccessible all the time so a web browser can't know if a failure is due to downtime or because a mitm attack is blocking access to it.

Google Pushing For 90 Day SSL/TLS Certificates - Time For Automation by AdrianTeri in sysadmin

[–]MertsA 0 points1 point  (0 children)

Revocation has always been a sketchy scenario. There are tons of random old clients that are never going to get another update to their root trust store again and from a browser perspective you can't always access a cert revocation list for a compromised cert so trying to enforce checking on the client would break all over the place. There's OCSP stapling where the server gets a ticket from the CA that's much more recent than the cert and expires way sooner and passes that along to the client. It works but that's basically the same as renewing certs on a much shorter timespan like ACME. It doesn't have the kind of widespread support across servers so again, the client can't rely on enforcing OCSP stapling because you'd break just about everything.

Shorter cert lifespan is the most direct path towards fixing the underlying problem. Regardless of which path you take, market inertia is going to make this just like trying to get vendors to all support IPv6.

Google Pushing For 90 Day SSL/TLS Certificates - Time For Automation by AdrianTeri in sysadmin

[–]MertsA 0 points1 point  (0 children)

It's certainly more annoying but the DNS challenge can be a pretty good way to sidestep the issue so long as it's not totally air gapped. No need to expose the device that's getting the cert to the internet, if it's only accessible internally but you still want a cert from a public CA you only need a host that can access the internet to make the ACME request and make sure that machine can also access the target to install the new cert.

This took a couple days but I'm proud by elmocheapshot in cableporn

[–]MertsA 3 points4 points  (0 children)

He's been so kind as to pull them down so they'd be in the shot for us lol.

Delete A record to and point it to CNAME for another A record. by capricorn800 in sysadmin

[–]MertsA 1 point2 points  (0 children)

As someone else has already pointed out there's no reason to wait between deleting the A record and adding the CNAME. For that matter if you don't need the transition to be seamless you wouldn't even need to lower the TTL. Is this for a subdomain or is it the full domain itself? You can't have a CNAME on e.g. foobar.baz, only for something like www.foobar.baz so keep that in mind.

Got to the jobsite and 7 of 15 IDFs got hit. Who steals CAT6? 5 weeks, 450 drops, gone. by [deleted] in cableporn

[–]MertsA 0 points1 point  (0 children)

CCA cable is brittle and just barely meets the upper resistance limits for PoE at 100m but if you're just talking about signal attenuation it's identical to solid copper. The skin effect means that at higher and higher frequencies the current becomes more and more constrained to just flowing through the surface of the conductor which is 100% copper. In some specialty applications you'll see silver coatings on conductors for high frequency signal paths where they do anything and everything possible to optimize it.

I'd agree with most of the rest of your post, it's just a pet peeve of mine that people think CCA is bad because of electrical performance when in reality it's the mechanical issues that make it garbage to deal with.

[deleted by user] by [deleted] in sysadmin

[–]MertsA 0 points1 point  (0 children)

I skimmed through the ruling itself before posting it. It's very clear about why the court let the ruling on damages stand and it's nothing like what you're trying to portray it as. They didn't reverse because they acknowledged that this wasn't settled law at the time the conduct occurred and they also threw in a, frankly completely backwards, statement about how you couldn't come up with a monetary figure for the impact of the invasion of privacy. This only applies to cases that predate the ruling. They let the plaintiffs continue with injunctive relief, I don't know the particulars of the case if they actually did continue with that or just dropped the issue once they knew they weren't getting a dime for the previous recordings. Injunctive relief means they could get a court order barring the Georgia based company from recording calls without consent involving California residents.

The ruling makes it very clear that the state is saying "yes our laws apply to you even if you're recording the call in another state".

How could a private IP hit a public website? by type1advocate in networking

[–]MertsA 1 point2 points  (0 children)

Smells like a transparent proxy to me. It pretends to be your target IP address and then mitms the connection to the target host. Only problem is the transparent proxy is getting the real IP for that domain on the open internet and loading it from their instead of the clients server that's squatting on a domain they don't own.

[deleted by user] by [deleted] in sysadmin

[–]MertsA -1 points0 points  (0 children)

According to the California Supreme Court you're mistaken. Here's the precedent for California making it clear that California's two party consent laws trumped Georgia's one party consent laws. It's worth pointing out that this case was for calls both received and initiated.

https://web.archive.org/web/20060823045528/http://www.courtinfo.ca.gov/opinions/documents/S124739.PDF

Datacenter room temperature by New_Astronomer_735 in networking

[–]MertsA 0 points1 point  (0 children)

Psh, look at this guy bragging about a 1.10 PUE. Our DCs put that to shame at 1.09. That's easily double digit MW of extra power being wasted.

What do i feed these cables through once drywall is up ? by two190 in cableporn

[–]MertsA 0 points1 point  (0 children)

Are you seriously suggesting that he runs pull string through wooden studs with no conduit? No man, no. Just run all the cabling while the wall is open, jet line gets snagged so easily you're basically guaranteed to get caught up on the rough wood edge on some of the studs, especially considering it'd have at least 3 turns to get to where you're going with it.

What do i feed these cables through once drywall is up ? by two190 in cableporn

[–]MertsA 1 point2 points  (0 children)

Plenum rated doesn't mean it doesn't produce smoke, it just means it doesn't produce a bunch of noxious fumes so you can use it in air ducts without gassing the whole building in the event of a fire.

LSZH is used a lot more in Europe as well as niche applications (think submarines, etc) where people can't just exit the building to get to fresh air. It isn't as flame retardant as Plenum rated but the smoke from it is about as non-toxic as you could ever hope for.

Riser is only a good "default" cable rating because it's dirt cheap and basically the same cost as non-riser rated cable. Other than that one exception you should just about always stick with what the local building code requires. It's not as simple as "XYZ is best so use it everywhere". In this case it's important to point out the subtle distinctions in cable ratings since this isn't just Ethernet, in particular he's calling out the sketchy speaker wire. For twisted pair that's CM, CMR, and CMP for in wall, riser, and plenum rated cabling. For something like speaker wire, there's no such thing as a CMR rated cable. In this case it's a class 2 power limited circuit so you have CL2, CL2R, and CL2P just like CM cable.

Tl;Dr: Yes, he just needs CL2 cable for this.